PT-2026-103732

The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display name via /wp-admin/profile.php + bbp reply content via bbPress reply form' parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This...